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' Abstract. Using the principle that characteristic polynomials of matrices obtained from 

elements of a reductive group G over Q typically have splitting field with Galois group 
isomorphic to the Weyl group of G, we construct an explicit monic integral polynomial of 
^ . degree 240 whose splitting field has Galois group the Weyl group of the exceptional group 

—5 ■ of type Es. 
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r 1. Introduction 

H : 

^ . The goal of this paper is to give a concrete exphcit example of a polynomial P E 'Zi[T] 

! such that the Galois group of the splitting field of P is isomorphic to the group ^^(Es), the 
Weyl group of the exceptional algebraic group Es. It was motivated by the construction of 
such extensions by Varilly-Alvarado and Zywina [VZ] using the Galois action on Mordell- 
Weil lattices of some elliptic curves over Q(t) which are isomorphic to the root lattice Eg 
(this leads in principle to infinitely many such polynomials, though they are not necessarily 
>• ' easy to write down), itself based on ideas of Shioda. The existence of such polynomials 
was already known from the solution of the inverse Galois problem for Weyl groups (see the 
! survey of Shioda [ShJ, or the paper fN] of Nuzhin, as well as |BDEPSt §2.2] or [V, Th. 2]). 

Theorem 1.1. Let P G Z[T] be the monic polynomial of degree 240 given by P{T) = 

^ ■ T^'^^Q{T + T~^), where Q is the monic polynomial of degree 120 described by Table 1 in 

OO ! Appendix B. Then the Galois group of the splitting field of P over Q is isomorphic to PU(E8). 
O ■ 

In fact, as we will explain in Proposition 14. it is possible to generalize the construction to 
' obtain infinitely many (linearly disjoint) examples. In another direction, although we used 
' the Magma software [M] to construct P (and partly to prove Theorem ll.ip . we explain in 
^ Appendix A how it could be recovered (in principle) "by hand" , and in particular that it is 

quite simple from the point of view of the structure of reductive algebraic groups. 

The basis of the construction is the following principle: if G/Q is a connected reduc- 
tive algebraic group given as a Q-subgroup of GL{r) for some r ^ 1, via an injective 
Q-homomorphism 

G G'L(r), 

and ii g E G(Q) is a "random" element, then the Galois group of the splitting field of 
(\ei{T — i{g)) (i.e., the characteristic polynomial of g, seen as a matrix through i) is typically 
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isomorphic to the Weyl group VI^(G) of G. Note that such a principle is in fact pretty close 
to some of the early methods used for the study of Lie groups (a "retour aux sources"), as 
explained in the historical notes in |Blj : in particular, a long time before the Weyl group 
was defined in the current manner, E. Cartan (see [C], in particular pages 50 and following 
for the case of Eg) determined the Galois group of det(T — ad(X)) for a "general" X in 
a simple Lie algebra over C (compare also with [Sht §8.4, last paragraph], where the same 
characteristic polynomial for eg is mentioned and related to the Mordell-Weil lattices; note 
those polynomials are not the same as the ones considered here, e.g, their roots satisfy many 
additive relations, whereas ours satisfy multiplicative relations, as explained in Remark l2.4p . 

This principle depends on stating what "random" means (and then on proving the state- 
ment!). This was done in [H, §7] for elements obtained by random walks 

in either SL{r, Z) (r ^ 2, so that G = SL{r), and i is the tautological embedding in GL{r)) 
or Sp{2g, Z) {g ^ 1, so that G = Sp{2g) and i corresponds to the standard embedding in 
GL{2g)): when k is large, the steps of the walk C,j being independently chosen uniformly at 
random among the elements of a fixed finite generating set of G(Z), the probability that the 
splitting field of det(T — g) has Galois group different from W{G) is exponentially small in 
terms of k. 

We do not take up the full details of this approach here for the exceptional group Eg/Q, 
though we will come back to this at a later time in greater generality. What we do is 
follow the principle to produce a candidate polynomial. We know that there is an a-priori 
embedding of its Galois group in W(Es), and it turns out (which we didn't quite expect) 
that it is possible to check that it is not a proper subgroup of ly(Eg). 

Remark 1.2. In order to allow easy checking, we have put on the web at the urls 
www . math . u-bordeauxl . f r/~kowalski/ eSpol . gp 
www . math . u-bordeauxl . f r/~kowalski/ eSpol . mgm 

two short files containing definitions of the polynomial above in GP/Pari and Magma, respec- 
tively. Loading either will define the variable pol to be the polynomial of the proposition. 

By construction, P is self-reciprocal (so all its roots are units). Its splitting field turns out 
to be totally real, and is a quadratic extension of the splitting field of Q. The discriminant 
of P is of size about 10^^^^^, and it is divisible by 

23640 . 3300 . 530 . 7328 . ^Q92 . ^^34 . ^3^4 . 33^28 . 4^g28 

■ 1033^ ■ 1103^^ ■ 3307^^ ■ 4649^ ■ 11467^ ■ 629569^ ■ 87087881^ ■ 508141873^ 

• 8321263487^^ ■ 58276913161^ • 126454995466730813^ ■ 202992518210175167^^ 

• 1644357711723148873333^^ • 17520591390337947024593065297057^ 

with the cofactor being a square. Clever use of Pari/GP [P] (as explained by K. Be- 
labas) shows that the discriminant of the number field of degree 240 determined by P (i.e., 
Q[T]/(P), not its splitting field) is 

1103^^ ■ 202992518210175167^^ ^ 8.9777- 10^^^^ 

It was also possible to find a polynomial Q such that Q[T]/{Q) ~ Q[T]/(Q) with smaller 
coefficients (by using the polredabs function), which is available upon request. 
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Notation. As usual, |X| denotes the cardinality of a set. For any finite set i?, Gr is the 
group of all permutations of R, with ©„, n ^ 1, being the case R = {1, . . . ,n}. We denote 
by Fq a field with q elements. 

Acknowledgement. Many thanks are due to K. Belabas for help with performing numer- 
ical computations (discriminant, basis of the ring of integers, polred) with the polynomial 
P, etc, and for explanations of the corresponding functions and algorithms in Pari/GP; also, 
thanks to S. Garibaldi for explaining why the computation with GAP coincides with the one 
with Magma (see Appendix A). 

2. A PRIORI UPPER BOUND ON THE GaLOIS GROUP FOR Es 

Let Eg/Q be the split group of type Eg; it is a simple algebraic group over Q of rank 8 
and dimension 248. For information on Eg as a Lie group, we can refer to [A]; for Eg as 
algebraic group, including proof of existence, abstract presentation, etc, see, e.g., |Spl[ Ch. 
9, Gh. 10, §17.5]. In Appendix A we also mention a few concrete details. 

Gontrary to classical groups such as SL{n) or Sp{2g) or orthogonal groups, which come 
with an "obvious" embedding in a group of matrices of size comparable with the rank 
(which is n — 1 or (yf, respectively), the smallest faithful representation of Eg is of dimension 
248 = dim Eg. More precisely, this is the adjoint representation 

Ad : Eg -> GL{ts) 

where eg is the Lie algebra of Eg, the tangent space at the identity element with the Lie 
bracket arising from differentiation of commutators. This representation is defined over Q 
and given by 

g ^ Te{h t-^ ghg-^), 

the differential at the identity element of the conjugation by g, see, e.g, |Bo[ 1.3.13]. The 
fact that Ad is injective is because the center of Eg is trivial (in general, the kernel of the 
adjoint representation is the center, in characteristic at least). 

Fix a maximal torus T of Eg that is defined over Q (but not necessarily split, so that 
T is not necessarily isomorphic to over Q, but only over some finite extension field; in 
fact, the case of interest will be when this field is large). Let X{T) ~ be the group of 
characters a: T — > Gm (not necessarily defined over Q). For each a G X{T), let 

ea = {X ets I Ad{t) ■ X = a{t)X, for all t G T} 

be the weight space for a in the adjoint representation. Let -R(T, Eg) be the set of non-trivial 
a G X{T!) with Qa 7^ 0; these are called the roots of Eg with respect to T. 

Remark 2.1. It is customary, to view X{T) as an additive group. In particular, for a & R, 
the inverse roots is denoted —a, and ai + a2 is the root 1 1— ^ ai{t)a2it), etc. 

The set -R(T, Eg) is an abstract root system in the space V = X{T) ®z R; cf. |Blt Gh. 6] 
for definitions. 

The structure theory of reductive groups (see, e.g., \Bo\ 13.18]) shows that the space Qa 
is one dimensional for each root a G R{T, Eg), and gives a direct sum decomposition 

(2.1) C8 = t© 0„, 

ae-R(T,E8) 

where t is the Lie algebra of T. 
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From this decomposition, we recover the fact that |-R(T, Eg)! = dim Eg— dim T = 248—8 = 
240. The Galois group of Q acts naturally on X(T): any a e X{T) and a G Gal(Q/Q), 
a{a) is the unique character of T such that 

for all t G T. The set of roots -R(T, Eg) is stable under this action. 

Finally, we recall that the Weyl group of Eg with respect to T is the finite quotient group 
W(T, Eg) = A^(T)/T, where N(T) is the normalizer of T in Eg. Since all maximal tori of a 
connected linear algebraic group are conjugate (see, e.g., |Spl[ Th. 6.4.1]), the Weyl group 
iy(T, Eg) is independent of the torus T up to isomorphism. We will write ^^(Eg) for this 
abstract group when the choice of torus is unimportant. 

The group W(T, Eg) acts on the roots by conjugation: for w G A^(T), a G -R(T, Eg), let 

(2.2) {w a){t) = a{w'Hw), 

which obviously depends only on the image of w in 14^(T,Eg). This action is faithful (for 
instance, because -R(T, Eg) generates the character group X(T), and T is its own centralizer, 
see [ES 13.17]). 

We can now state the main result of this section. 

Proposition 2.2. Fix a semisimple element g G Eg(Q), and let T be any maximal torus of 
Eg that contains g. 

(1) We have the factorizatioi^ 

det(T-Ad((7)) = (T-l)« n (T-aig)). 

(2) Define the polynomial P = det{T - Ad{g)) / {T - if G Q[T], and let Z gQ be the set 
of roots of P. Assume that P is separable. Then the map 

(2 3) 3 J-^'^'^'-^s) ~^ ^ 

is a bisection which respects the respective Gal(Q/Q) -actzons. 

Let K be the splitting field of P, i.e., the extension of Q generated by Z. Then the Galois 
action on R{T, Eg) induces an injective homomorphism 

0,: Gal(ir/Q)-^W^(T,Eg) 

such that for all a G Gal(i^'/Q) and a G -R(T, Eg), we have 

(pg{cr) ■ a = a{a). 

Proof. Since g is semisimple, it does lie in a maximal torus T of G (see, e.g., |Spl[ Th. 
6.4.5 (ii)]), and we fix one such torus. The operator Ad{g) acts as the identity on i (since 
conjugation by g is trivial on T) and as multiplication by a{g) on each g^, for a G -R(T, Eg). 
Therefore from (12. ip . we deduce that 

det(T-Ad(^7)) = (T-l)« n (T-aig)). 

a&R{T,Es) 

^ It is precisely because the values of the roots a are the eigenvalues of matrices arising from the adjoint 
representation that the terminology root, which may seem confusing today, was introduced in the historical 
development of the theory of Lie and algebraic groups. 
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Thus P, as defined in the statement of the proposition, is indeed a polynomiaL 

Now we assume that P is separable. We first note that a{g) ^ 1 for any a G -R(T, Eg). 
To see this, we claim that for any a, we can find another root a' such that a" = a + a' (in 
additive notation) is also in i?(T, Eg). Then, since a'{g) ^ Oi"{g) by assumption, we obtain 
a{g) 7^ 1 as desired. From this, in turn, we deduce (see, e.g., |Bol IV.12.2]) that that g is 
regular and hence is contained in a unique maximal torus T, which is necessarily defined 
over Q. 

Now, to check the claim, one can look at the description of the root system in Remark |2.5[ 
but this is in fact a general property of any root system R with Dynkin diagram containing 
no connected component which is a single point: given a & R, one first chooses a system A 
of simple roots such that a e A, and take a' to be one of the simple roots which are not 
perpendicular to a (which exists because of the assumption on the root system; in other 
words, a and a' are connected in the Dynkin diagram of the simple roots; e.g., for Eg, if a 
corresponds to the vertex labelled 1 of the Dynkin diagram (12. 5p . one can take a' the root 
labelled 3, etc). Then [a, a') are two simple roots for an irreducible root system of rank 2 
contained in R, and one can check that a + a' & R using the classification of those (see, 
e.g., |Spl[ 9.1.1]). For Eg (or more generally if the Dynkin diagram of R has no multiple 
bond), one can also simply notice that Sa(a') = a' + a, where Sa is the reflection associated 
with a (see, e.g., [SpT| 10.2.2]). 



Coming back to P, from the above factorization, we find that the map P is well-defined and 
surjective, and since |-R(T, Eg)| = 240 = |Z|, it is therefore bijective. For each a G -R(T, Eg) 
and a G Gal(Q/Q), we have 

f3{a{a)) = (r{a){g) = (T{a){a{g)) = a{a{g)), 

since g G Eg(Q). The Galois group Gal{K/Q) acts faithfully on Z (the permutation action 
on the roots), so using j3, we find that Gal{K/ Q) acts faithfully on -R(T, Eg), and this induces 
an inject ive group homomorphism 

03 : Ga\{K/Q) ^ ©i?(T,E8)- 

Since iy(T,Eg) acts faithfully on i?(T,Eg), we may naturally view iy(T,Eg) as a sub- 
group of ©_R(T,E8)- To conclude, it is thus sufficient to show that the image of 0^ lies in this 
subgroup, or in other words, that for every a G GaA{K / Q) , there exists G Vr(T, Eg) such 
that 

a{a) = Wa ■ a, for all a G -R(T, Eg). 

Fix a split torus Tq of Eg that is defined over Q, which exists since we assumed that our 
group Eg is split over Q. Note that Tq is split over K and that T is also. Indeed, to check 
this, it is equivalent to check that the action of Gal^Q/K) on the character group of T is 
trivial (see, e.g., |Spl Prop. 13.2.2]). For this, it suffices to show that the roots are invariant. 



since they generate X{T) (see, e.g., |Spl[ 8.1.11], noting that Eg is of adjoint type, or the 
description of the root system in Remark 12.51) . But for any a G GaA^Q/K), we have 

f3{a{a)) = a{a){g) = a{a){a{g)) = a{a{g)) = a{g) = (3{a), 

and a{a) = a follows from the injectivity of the map (3. 

Now the fact that T and Tq are both i^-split implies that there exists x G Eg(K) such 
that T proved, e.g., in [Spl[ Th. 15.2.6]. Consider then any a G Gal(-ft'/Q), 

and note that a{x) makes sense since x G Eg(ii'). Since both T and Tq are defined over Q, 



we have T = cr(x)Tocr(a;)~^ and hence a{x)x~^ G A^(T). Let be the element of Vr(T, Eg) 
represented by a{x)x~^. We now claim that a{a) = ■ a, for all a G -R(T, Eg), which will 
finish the proof. 

To see this, note that the Galois group Gal(if/Q) acts trivially on X(Tq) (because Tq is 
split), and that we have an isomorphism 

, (To - T 

1 t I— i> xtx 

which is defined over K. For any a G -R(T, Eg), we have 

a{a) = a(a 070 7^-*^) = o 7) o ai^j)'^, 
and then, for all t G T, we obtain 

(2.4) (a(a))(t) = a{xa{x)'Ha{x)x'^) = a{{a{x)x'^y^t{a{x)x'^)) , 

which is the desired conclusion. □ 

Remark 2.3. A different approach to Proposition 12.21 is sketched (for classical groups) in [Kl 
App. E]. The one above is more direct and intrinsic, and is more amenable to generaliza- 
tions, but we indicate the idea (which can be seen as more down-to-earth): given a (regular 
semisimple) g G Eg(Q), and a fixed split torus Tq, one considers the set 

Xg = {t E Tq \ t and g are conjugate}. 

This is a non-empty set because g is semisimple, and one shows that the Weyl group (de- 
fined as A^(To)/To) acts simply transitively by conjugation on Xg] an injection Gal(i^/Q) — > 
ly(Eg) is then produced by fixing to £ Xg and mapping a to such that cr(to) = ■ to- 
Another small computation then proves that the permutation of the set of zeros Z obtained 
from a given a G Gal(i^'/Q) is always conjugate to the permutation of i?(To,Eg) induced 
by a. 

Remark 2.4. Proposition 12.21 implies that the zeros of a polynomial det(T — Ad{g)) sat- 
isfy many multiplicative relations; indeed, all the 240 zeros are contained in the multi- 
plicative subgroup of generated by the a(t) corresponding to eight simple roots a (see 
also [BDEPSj for this type of questions, and the next remark if the terminology is unfamiliar). 



Remark 2.5. Here are some basic facts on l^(Eg) which can be useful to orient the reader. 

The group W^(Eg) is of order 696729600 = 2^^ ■ 3^ ■ 5^ ■ 7, and its simple Jordan-Holder 
factors are Z/2Z, Z/2Z and the simple group D4^(F2) (also sometimes denoted Pfig (2), 
1^4(2), Df{2), or 0^(2) as in the Atlas of Finite Groups |At j ) . where is the split algebraic 
group of type of dimension 28; this composition series is essentially already computed 
by E. Cartan in [O, P- 50 and following], working on it as a subgroup of ©240 (a rather 
impressive performance). It can be presented as a Coxeter group (see |Bll Chapter IV]) 
using eight generators wi, . . . , wg, corresponding to a system of simple roots ai, . . . , ag G i? 
(i.e., roots such that any a E R can be either represented as integral combination of the 
with non-negative coefficient, or its opposite can be written in this way, but not both), 
subject to relations 



= 1 {wiWj)"''^''^^ = 1, l^i<j^ 



where 

m(z,j) = 3 if (z,j)e {(1,3), (3,4), (2,4), (4,5), (5,6), (6,7), (7,8)}, 
and m{i,j) = 2 otherwise. (This is encoded in the well-known Dynkin diagram 
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(2.5) 2 

where m{i,j) = 3 if and only if the vertices labelled i and j are joined by an edge). 

One can also define ^^(Es) as the automorphism group of the lattice Fg C (of rank 8) 
generated by (|, . . . , |) and the sublattice 

{{xi,...,X8) e I xi + --- + a;8 = 0(mod2)}, 

with the standard bilinear form (see, e.g., [Sel V.1.4.3] for some more discussion of this lattice, 
and also [A, §10], where the isomorphism ^^(Eg) — Aut(rg) is proved; note many authors 
studying lattices write Eg for the lattice instead of the group). In fact, in the identification 
of Vl^(T,Eg), for some maximal torus T C Eg, as Aut(rg), Fg can be identified with the 
character group of T, and the roots R are then interpreted as the 240 vectors in Fg with 
squared- length 2, namely 

±Xi ± Xj, 1 ^ i < j ^ 8, 

|(±Xi ± a;2 ± • • ■ ± Xs), with an even number of minus signs, 

the action of H^(Eg) on R being the same as the action of the automorphism group. The 
lattice Fg is generated by R, with a basis given for instance by the following eight roots 

|(Xi + X2 - X^ - X4 - X5 - Xq - X7 - Xg) 

-X2 + X3, X2 + X'i, -Xi + Xj+i, for 3 ^ 2 ^ 7, 
(which are therefore an example of system of simple roots); see, e.g., jAl, p. 56]. 

Remark 2.6. See |Sh[ §7] for explicit examples of polynomials whose splitting fields having 
Galois groups ^^(Ee) and iy(E7); they are much simpler, which can be expected, since 
\W{^&)\ = 51840 = 2^ ■ 3^ ■ 5 and |P^(E7)| = 2903040 = 2^° ■ 3^ ■ 5 ■ 7. Moreover these 
polynomials have degree 27, resp. 28, which is smaller than the degrees that would arise 
from the adjoint representations, namely 72 = 78 — 6 and 126 = 133 — 7 (this reflect the fact 
that there exist faithful representations of the groups Eg and E7 of simply-connected type 
in dimension 27 and 56). 

3. Construction of the example 

The polynomial of Theorem II. II is constructed using Magma (version 2.13-9). We look at 
the split group Eg/Q, and the system of 16 algebraic generators given by Magma, which come 
from the Steinberg presentation of reductive algebraic groups. Precisely (see Appendix A 
for some more details and references), those are the generators Xi = a;Q,;(l), 1 ^ z ^ 8, of the 
eight one-parameter unipotent root subgroups [/q. associated with the simple roots (see, 
e.g., |Spl[ 8.1.1]), and the generators xs+i = x_q,. (1), 1 ^ z ^ 8, of the unipotent subgroups 
associated with the negative of the simple roots. The simple roots are numbered (by Magma) 
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in the usual way described explicitly, for instance, in [Bit Ch. VI, §4.10], and correspond 
with the vertices of the Dynkin diagram as in Remark I2.5[ 

We then construct an element g in E8(Q) by taking the product of those sixteen generators 
Xi (in the order above) namely 

(3.1) g = Xi - ■ ■ XiQ = X„i(l) ■ ■ ■X„g(l)x_ai(l) ■ ■ ■X_ag(l), 

in terms of simple root subgroups; we think of this as a very simple random walk of length 16. 
Then using the adjoint representation of Eg, we compute the matrix m = Ad((?) (which is in 
fact in S'L(248, Z); in the basis given by Magma, it is a fairly sparse matrix, with only 6661 
non-zero coefficients among the 248^ = 61540 entries; the maximal absolute value among 
the coefficients is 16) o 

The characteristic polynomial det(T— m) G ZfT] is divisible by (T— 1)^ by Proposition [521 
and the polynomial P of Theorem 11.11 is 

P = det(T-m)(r-l)-^ 

Here are the exact Magma commands to obtain this polynomial (in a few seconds, this 
speed depending on fast routines for computing characteristic polynomials of big integral 
matrices; neither GAP nor Pari/GP are able to do this computation quickly): 

A<T>:=PolynoniialRing(RationalField()); 
E8 : = GroupOf LieType ( " E8 " , Rat ionalField ( ) ) ; 
gen:=AlgebraicGenerators (E8) ; 
rho :=AdjointRepresentation(E8) ; 

g := Identity (E8 ) ; for i in gen do g:=g*i ; end for; 
m : =rho (g) ; 

pol : =CharacteristicPolynomial (m) div (T-l)"8; 

Any decent software package confirms that P is at least irreducible over Q (in particular, 
its zeros are distinct, as required for the second part of Proposition 12.21) . Because the 
roots of P come in inverse pairs, it is possible to write P = T^^^Q{T + T~^) for a unique 
polynomial Q G Z[T], which we did to shorten a bit the description of P in Theorem 11.11 
The irreducibility of P also implies that g is semisimple: indeed, it suffices to check that 
Ad((7) is diagonalizable, but this is clear because the minimal polynomial of Ad((y') has to be 
(T — 1)P, and 1 is not a zero of Pjl 

Now to prove the proposition, let K be the splitting field of P, and G = Gal{K/Q). 
Thus according to Proposition 12.21 we know first that G can be identified with a subgroup 
of ^^(Eg), and more importantly that this identification is made in such a way that the 
action of G by permutation of the zeros of P in K corresponds to the action of iy(E8) as a 
subgroup of ©240 by permutations of the roots of Eg. 

This last compatibility is crucial because of the following well-known fact of algebraic 
number theory: if 5 G Z[T] is an irreducible monic polynomial of degree d with splitting 



Note that we also checked that if we construct an element of E8(Q) by taking the product of the i first 
generators (in the same order as above) with 1 ^ j ^ 15, then the resulting polynomial is not irreducible. 

li g were not semisimple, we could also simply argue with its semisimple part, so this is not of great 
importance. 
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field F/Q, H the Galois group of F/Q seen as permutation group of the roots of S in C, p 
a prime number such that S factors modulo p in the form 

S (modp) = Si ■ ■ ■ Sd, 

where Si is the product of ^ distinct monic irreducible polynomials of degree i in Fp[T], 
then H C &d contains a permutation with cycle type consisting of ni fixed points, n2 disjoint 
transpositions, etc, and in general rii disjoint z-cycles. 

We apply this to P and ©240, with primes p = 7 and p = 11. We find (again, any decent 
software package will be able to factor P modulo 7 and 11) that P (mod 7) is the product of 2 
distinct irreducibles of degree 4, and 29 distinct irreducibles of degree 8, whereas P (mod 11) 
is the product of 16 distinct irreducible polynomials of degree 15. Hence G C ©240 contains 
elements of the type 

(3.2) ,s = cS\?M^^--4?, ^i5 = 4"^---4f 

where the cf^ (resp. d^l^^) are disjoint ^-cycles (resp. disjoint 15-cycles). 

In both cases. Magma confirms that such conjugacy classes are unique in ^^(Eg) (i.e., there 
is a single conjugacy class in ^^(Es) with the cycle structure of gs or gi^ as permutation of 
R). 

There are nine conjugacy classes of maximal subgroups in ^^(Eg), which are known to 
Magma. Their indices in ly(Eg) cLFG clS follows: 

12096, 11200, 2025, 1575, 1120, 960, 135, 120, 2. 

Let M be any maximal subgroup; then Magma can also output a list of the cycle structures, 
in the permutation action on &r ~ ©240, of each conjugacy class of elements in M (of course, 
there are sometimes different conjugacy classes in a given M with the same cycle structure). 

Now it turns out, by inspection, that none of the maximal subgroups of ^^(Eg) contains 
elements with the two cycle structures given in 03.21) . and this means that the group G = 
Gal{K/Cl) can not be a subgroup of any of them, and therefore we have G = ly(Eg). 

More precisely, the subgroup of index 2 is unique and is the kernel of the restriction of the 
signature homomorphism e, which is a surjective homomorphism 

e : WiEs) ^ 6240 ^ Z/2Z, 

such that e{gs) = (—1)^^ = —1, £^(^'15) = 1- We see from this that G is not contained in 
kere, and hence the only thing to check to conclude that G = Vr(Eg) is the fact that none 
of the maximal subgroups of index > 2 contains an element of the class gi^. 

This is what we deduced from Magma (but it would be interesting to have a more con- 
ceptual proof; it can also be checked in the Atlas of Finite Groups |Atj . by reducing to the 
"big" simple quotient .04(2) = (ker e) / (center) , for which the maximal subgroups are listed 
"on paper"). 

Here are the Magma commands which can be used to construct ly(Eg) and inspect the 
structure of its maximal subgroups: 

W:=WeylGroup(E8) ; max:=MaximalSubgroups(W) ; 
for m in max do print (" "); 

for c in Con j ugacyClasses (m ' subgroup ) do 
print(CycleStructure(c[3])); 

end for ; 
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end f or ; 



The url [www . math . u-bordeauxl . f r/~kowalski/ eScheck . mgm contains a Magma script 



that hsts the maximal subgroups containing elements of each of the two conjugacy classes 
(though, as we observed, checking is only needed for gi^,). 

Remark 3.1. Here are some remarks about this proof, which go in the direction of making 
the objects and arguments more intrinsic and independent of an a priori knowledge of the list 
of maximal subgroups of iy(E8) (it's not clear if it is reasonable to hope for such a proof...). 
First of all, the conjugacy class of order 15 is particularly symmetric, and we can also prove 
its uniqueness by pure thought. Indeed, it corresponds to the regular class of order 15 in 
^^(Eg), as defined by Springer |Sp2] , and Springer proved that there is at most one regular 
conjugacy class of a given order in the Weyl group for an irreducible root system (see |Sp2| , 
in particular Theorem 4.1, Proposition 4.10 and Table 3 in §5.4). Even more precisely, 5^15 is 
the class of the square of the Coxeter elements (e.g., |BH Ch. V, §6] for the basic properties 
of the Coxeter element). 

Finding the two classes above so easily is somewhat surprising, but it is not such amaz- 
ing luck. First, the size of (715 is |iy(E8)|/30 (again, this can be deduced from Springer's 
work |Sp2[ Cor. 4.3, 4.4] without invoking any computer check), so by the Chebotarev 
density theorem, an extension L/Q with Galois group iy(E8) may be expected to lead to 
this conjugacy class for roughly three percent of the primes, which is not negligible. The 
class gs, though less symmetric, is even less surprising from this point of view: it contains 
no less than |l^(E8)|/16 elements, and is the largest conjugacy class in ^^(Eg) (and, as we 
explained, any odd conjugacy class would have done just as well for our argument) 

We state formally the observation we used on subgroups containing gi^, as it may prove 
to be useful for later reference: 

Lemma 3.2. Let wi, . . . , ws be simple reflections generating W(Es). Let 6 = 1 or 2, and 
let c = Wi---Ws be a Coxeter element in ^^(Eg). Then any proper subgroup of W(Es) 
containing an element conjugate to is contained in the index 2 subgroup kere. 

Proof. We mentioned that the case 6 = 2 is checked unenlighteningly using Magma, and then 
the case 6=1 follows since a proper subgroup containing a conjugate of c contains also a 
conjugate of c^. (Note that by |Sp2[ Prop. 4.7], if 6 is coprime with 30, resp. 15, then is 
conjugate to c, resp. (?, so the lemma holds in fact for any 6 coprime with 15.) □ 

4. Infinitely many extensions 

In this section, we show that the construction of the specific polynomial P also leads easily 
to infinitely many examples. 

Proposition 4.1. Let Eg/Z be a model of the split Chevalley group Eg defined over Z, and 
let S C Eg(Z) be a symmetric finite generating set for Eg(Z). Then 

(4.1) liminf — — r|{(si, . . . , Sfc) G S''^ I the splitting field of det(T — Ad{si ■■■ Sk)) 

has Galois group W(Es)}\ > 0. 



^ There are 112 conjugacy classes altogether, which are also described explicitly by Carter in |Caj : in his 
notation, gs is the class with F = A" on p. 56 of loc. cit., while .915 is the class with F — £8(05) on p. 58. 
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In particular there are infinitely many g G £§(2) for which det(T — Ad{g)) has splitting 
field with Galois group isomorphic to ^^(Eg). 



As explained before, one can expect a much stronger result (the left-hand side of (14.11) 
should be ^ 1 — Cexp(— c/c) for some c > 0, C ^ 0), but checking this would involve 
a deeper analysis of the finite groups E8(Fg), which we defer to another time. Also, it 
should be possible to prove in this manner the existence of infinitely many polynomials with 
(globally) linearly disjoint splitting fields with Galois group ^^(Es) (this is already known, 
see [Shi Th. 7.1]). 

Proof. First of all, the fact that E8(Z) is finitely generated (hence S exists) is a standard 
property of Chevalley groups. 

Let g be the element of Eg in the proof of Theorem 11.11 it turns out that g G Eg(Z) 
(this is clear from (13.11) and the fact that Magma constructs a group defined over Z). Let 
P = det(T — Ad(5'))(T — 1)~^. Now, we claim that for any h G Eg(Z), if h is conjugate 
to g modulo p for p = 7 and p = 11 (where congruences refer to the reduction maps 
Eg(Z) Eg(Fp), or to congruences of matrices after applying Ad, and conjugation is in 
Eg(Fp)), then the Galois group of the splitting field of Q = det(T - Ad(/i))(T - 1)"^ must 
be W(Es). 

Indeed, let kg G Eg(Q) be the semisimple part of h (see, e.g., [Bo^ L4.4]); we also have 

Q = det(T - Ad(/i,))(T - 1)-^ 

For p = 7 and p = 11, we have Q = P (modp), and since P has distinct roots modulo 11, 
not including 1 G Fn (it has only irreducible factors of degree 15), these conditions imply 
that kg must be regular semisimple, and that Q has distinct roots. 

Finally, the Galois group of the splitting field of Q will contain elements of the same conju- 
gacy classes gs and gi^ discussed in the proof of Theorem II. H and hence by Proposition \2.2\ 
it will have to be isomorphic to W(Es). 

Now let 

i7 = Eg(F7)xEg(Fn). 

Because the Eg(Fp) are distinct non-abelian simple groups for all p ^ 2 (this is due to 
Chevalley |Ch] ) . the reduction map Eg(Z) H is surjective. Indeed, the individual re- 
duction maps Eg(Z) — >• Eg(Fp) are onto, because the algebraic generators Xq,(1) in Eg(Z) 
associated with the roots of Eg (with respect to a split maximal torus) reduce to the corre- 
sponding generators of Eg(Fp) (see, e.g., [St', §6] for the fact that the elements Xa{l) generate 
the group of rational points of a simple split Chevalley group over a prime field; this can 
also be checked for p = 7, 11 with Magma's Generators () command), and one can apply 
the classical Goursat lemma to the image of tt (a proper subgroup of Gi x where Gi 
are non-abelian simple groups, which surjects to Gi and 6*2? is the graph of an isomorphism 
Gi^Ga). 

Then it is a standard fact about random walks on finite groups ("convergence to the 
invariant distribution of reversible, aperiodic, irreducible, finite Markov chains") that we 
have 

1 \C\ 
, ^™ Tcifcl'L^'^i' ■■■^Sk) e S'' I 7r(si ■■■Sk) is conjugate to {g,g) e H}\ = — 
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where C C H is the conjugacy class of {g, g) (see the discussion in [Sal Th. 2.1, §2.2] and [Kl 
Chapter 7]; in our case, the aperiodicity follows from the symmetry of S", and the fact that 
there is no non-trivial homomorphism E8(Fp) — >■ Z/2Z). 

It follows from the two observations above that the proposition holds with the precision 
that the liminf is ^ |C||-ff|~^ (which, however, is very small, roughly 10~^^). Finally, al- 
though distinct "words" (si, . . . , Sk) may lead to the same element, the result clearly implies 
the existence of infinitely many distinct h with the desired property (e.g., because if there 
were only a finite list {hi, . . . , h^) of such, we could repeat the argument with additional 
congruences si - ■ ■ Sk ^ hi (modpi) where pi is a prime chosen so that the hi do not represent 
all classes modulo pi, e.g., pi > N, to obtain a contradiction). □ 

Appendix A: intrinsic characterization of the polynomial 

We now build on fl3.ll) to explain in detail how the definition (and computation) of P 
may be phrased in such a way that it does not depend on any choice or implementation 
detail in Magma's code (which may, in particular, vary from version to version). So, in 
principle, it would be possible to compute P by hand using only printed references (such 
as ^ or [CMT] ). More practically, other programs can be used to check the computation. 

To make things clearer, we denote here by E™/Q the split group of type Eg over Q given 
by Magma. Associated with it are a maximal torus T*" C E^, split over Q, the set of roots 
R associated with T™, and a certain choice A C -R of simple roots. Those are enumerated 

A = {«!, . . . ,^8} 

as dictated by the Dynkin diagram: the roots ctj and aj are not orthogonal, with respect to 
a Vr(E8)-invariant inner product on X(T™) ® R, if and only if the vertices i and j of the 
Dynkin diagram are connected. 

For each a & R, there is a one-parameter unipotent root subgroup Ua which is the image 
of a non-trivial homomorphism 

•^a ■ ' -'-'8 

which is defined over Q and such that 

t~^Xa{u)t = Xa{0!{t)u) 

for t G T"' and u G Ga- The generators giving g G E™(Q) in (13.11) are Xi = XaX^) for 
1 ^ z ^ 8 and xg+i = x_ai(l) for 1 ^ z ^ 8. 

To compute Ad{g), since Ad is an homomorphism, one needs to compute Ad{xa{u)) for 
a E R and m G Q. Now we have an induced map between Lie algebras 

Lie(G,) ^Lie(E^). 

Define = dxa{l) G Lie(E™); this is a generator of the root space Qa associated to a. 
Because the image of Xa is unipotent, ad(eQ,) is a nilpotent endomorphism of Lie(E^), where 
ad is the adjoint representation at the Lie algebra level (so that ad(A) maps Y to [A, F], 
where [A, Y] is the Lie bracket). Then we have the formula 

(4.2) Ad{xa{u)) = exp{uad{ea)), 

where the exponential, which can be interpreted by the usual power series as an exponential 
of matrix, is in fact a polynomial in u ad(ea) since ad(eQ,) is nilpotent (see (14.31) below). (This 
can be proved purely algebraically, but we may also extend scalars to R, and see that both 
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sides represent smooth functions of m G R into GL(Lie(E^) ® R) which satisfy the same 
ordinary differential equation ^ = ad{ea)y and which take the same value at 0). 

Thus to compute Ad{g), it is enough to compute the endomorphisms ad(eQ,) for a E R. 
But since a basis of the Lie algebra is made of a basis (say hi, ... , hs) of the Lie algebra 
of the torus T*", and the Cq, for a & R, this amounts in turn to being able to compute the 
brackets [cq,, e^] for a, P E R and [cq,, hi] for all a and i. 

It turns out that those brackets are explicitly known and depend only on the "abstract" 
root system R except for 

[ea,ep] = c{a,f3)ea+fi 

where c{a,P) G Q^. Those c{a,P) are known as the structure constants for the Lie algebra; 
in fact, when the group comes from a group scheme defined over Z (as is the case of E^), 
we have c(a,/3) G {±1}- At the level of the group, the structure constants occur in the 
commutator relations 

for a, P E R with a + P E R and -u, f G Ga (the simple form of this relation is due to the 
fact that the root system of Eg is an example of simply laced root system, see, e.g., |Spl[ 
§10.2]). 

Note in passing that the other brackets imply in particular that ad(eQ,) is nilpotent of 
order 2, so that (14. 2 p becomes 

(4.3) Ad{xa{u)) = exp{u ad(eQ,)) = Id + m ad(eQ,) + — ad(ea)^, 

see, e.g., [SpT[ 10.2.7] or [CMTl §3]. 

So the endomorphism Ad{g) is easily computable from the knowledge of the structure 
constants. However, matters are somewhat complicated from then on by the fact that there 
is no absolutely canonical choice of the c{a, /?). Still, as described for instance in [CMTl §2.3, 
§3], once a certain total order has been put on the root system, there exists a certain set of 
extraspecial pairs (a,/?), precisely 112 of them, for which c{a,P) can be chosen arbitrarily 
in {±1}, and then all other structure constants are uniquely determined. 

Thus to describe unambiguously our endomorphism Ad{g), it suffices to describe the 
extraspecial structure constants in Lie(E^). These are defined to all be +1. This can be 
checked by the following Magma commands: 

L : = LieAlgebra ( GroupOf LieType ("E8" , Rat ionalField () ) ) ; 
ExtraspecialSigns (RootDatum (L)) ; 

This already provides a way to construct from scratch, in principle, the polynomial P of 
Theorem II. 1[ However, there is an even stronger "unicity" feature, which was explained to 
us by Skip Garibaldi: for any choice of generators Xq,(1) of the unipotent root subgroups 
(of a split group Eg of type Eg over Z, with split maximal torus T/Z and simple roots 
A = {tti,...,ag}), determining the generators Xi as above, the element 

g = Xi---XsXg---XiQ 

has the same characteristic polynomial. The point is that the elements are determined 
up to sign from the choice of the simple roots, hence the possible changes are determined by 
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a vector e = {ei, . . . ,es) E {±1}^ of signs, and the possible elements g that can be obtained 
are, relative to a fixed group Eg/Z, of the form 

(^l) ■ ■ ■ Xag{£8)^-ai{£l) ■ ■ 'X-asi^s) 

Now it turns out that there exists an element G T, depending only on those signs, such 
that 

for all simple roots (this follows, e.g., from [B2, Vlll.5.2, Cor. 3]). Then a simple 
computation (which can be done in SL{2), because it only concerns a root and its negative) 
shows that we also have 

and therefore we also have 

9e = te9t;\ 

so that all Ad(5'e) are conjugate and have the same characteristic polynomial. 

We implemented this strategy using the GAP system |GAPj . version 4.4.9, which knows 
about Lie algebras (but not algebraic groups), and has different structure constants than 
those of Magma (for instance, there is an extraspecial pair (ai, a^), and [cq,^, Ca^] = Ga^+as for 
Magma, while [e^j, 6^3] = —Cai+a^ for GAP). The recipe above, as it should, leads to a matrix 
with the same polynomial P as in Theorem ll.il (note that the CharacteristicPolynomial 
function in GAP is not up to the task of computing P from the matrix in a reasonable amount 
of time, so we did this last check using Magma again, though one could also check modulo 
sufficiently many small primes to ensure the result by the Chinese Remainder Theorem). 
Here are the commands to produce this matrix: 

L:=SimpleLieAlgebra("E" ,8,Rationals) ; 
d: = [] ; 

for i in [1 . . 248] do 

Append (d, [AdjointMatrix(Basis(L) ,Basis(L) [i])]) ; 
od ; 

a: = [] ; 
am : = [] ; 

for i in [1 . . 8] do 

a[i] : = IdentityMat (248) +d [i] +l/2*d [i] *d [i] ; 

am[i] :=IdentityMat (248) +d [120+i] +l/2*d [120+i] *d [120+i] ; 
od ; 

m : = a [1] *a [2] *a [3] *a [4] *a [5] *a [6] *a [7] *a [8] ; 

m:=m* am [1]* am [2]* am [3]* am [4]* am [5]* am [6]* am [7]* am [8]; 

Since GAP is Open Source, this computation can (or could) be checked in complete detail, 
guaranteeing the correctness of Theorem II. 1[ 

Appendix B: coefficient table 

We conclude with an Appendix listing the table of coefficients of the polynomial Q such 
that P(T) = T^^°Q{T + T'^). 
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Degree i 



Coefficient of 



365587894983967922854560421106658794835269162025801581455381270108994772086354097689969 
-11188764671313743052104852260462353867603756780241598167388311775144605678410262867332448 
169253696238399029559192135798369681596869020592118579039666548219126339368278708130365896 
-1687159920262524494571824891028833720039695470637056956223462293372163529290126431304585100 
12466538870569350428117512482674638738192598391028225510113876433671029848121166234252784168 
-72826947156697363455035723423426971890324922381314772703337692580409097282009564861222315768 
350331529672673601609711561533019721386090515420775351136161318553244630344247566318282845504 
-1427238565615616836874966027280849892931467391947083350631098008579547451949365512165445324548 
5026354438587350042393019188859322619309223067912455590765316222074769006654715395492167534064 
-15543242692747890030945651958468728793028138424448388052344884541152421476286890160281606087912 
42727722856586577963125858580310302599252714404522901925297264385654281164703726634073363638112 
-105456673870095173711703163143669727224697814378273599459423442778596360012854640538260794921080 
235607817095755199368858190149899878856163978515561431455451403131557914807361950016856603119900 
-479770149264907609591636867066530148444729317862800608632937138608127032184610743855219428626708 
895635623173061803600226851312211772312504932418933306086383616156548261949688014524531333153508 
-1540472555790089754392061652689278932257505758853194366507839523329666453963515188071478275995640 
2451788710586871745589664228861539890944914421283328064352160762645878635406460765371848464480340 
-3624640505901638188009697337857954483473385109589930872949558184551987911180781360042790583083604 
4994024072126951505126399098824620904652453895567294295762673834554854694248727868906577016537540 
-6431721637672973764253559554028129752608859470080682240640404627541331731173957688036200659035092 
7763241468623979545008124501105553771540039037756350364261700519310257100760280299151055542732492 
-8802942880381499388245651070259273872571338870198906824716298766585276914830555824919832373777496 
9397428905594516743427299464872348062738848222907978714295289389671821494398632421489330984834096 
-9462921861838231504232648180683566209060687542850222756830572873896415321834823788805352470036944 
9004042910145318452280462187844950546979429562212010153159452511976316511237893389182144564071816 
-8108466777447973350625143866020889145905001781484033233303172750662906603502257635040763697120800 
6920877993691644199503325490868076639226322468228894863452356759758353696538512384603684679212236 
-5606393286650355050632445312392545648077485412935086399427015013222455115423342550668229228526380 
4315552971543918712292689802749919612866096319783016002162626109826378082792279094813015908629560 
-3160147292945573961625584424097717920370225757650282483390682408815821565443532117419343460827840 
2203660581121260808668034624515265900353324373444058449372337614106044024846226145678411752103944 
-1464744343303019546273900066171788739473025422537466727740192615776481945774661361874676553542888 
928837747351900139847510911539219291666880836492600960301761612482212279686785348971171633827678 
-562380987452023460657841067338702972535374341028182139165378619782789496619429231331416465467136 
325356235824906304914262446976176796571764856456686279807557436317349277524804415206207943829668 
-179980581397996318804833400684252642822685183748168637880480218232713417673333008007141832612656 
95259358673342811962577374968024344116759528191118197330901991055953518185301961938058278687152 
-48268244673830087725415910980532812904398769665363772047167723957702501678922709545345961314952 
23427392442378901750354958702292727966207504749183723357421289869802194332649685331485983388676 
-10897163294836081802023740205919221704582045121673085440709523835797116373484015837949721485760 
4859945481426652393657932982123404648051819351769400595806382044197187788576701075955522665148 
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Coefficient of 



-2079041289572381880981851137517243250745330223456680067657643451728129396120093304826885539344 
853451569340348395409517113261975739247889854460920295141494937564435136719739663763259170648 
-336306101614439964957860525247000005857956841159545332435837005318322034194039653447757128580 
127254544703467199806219784585607568957868365018715949880037719179469076397221511835490064520 
-46251344543607872597100973940088670916183046876614132396624422211322670222925432802603348764 
16151229449214495754070501316928248080301470592125995573153793317058666430416170267465079692 
-5420296230053687740961180866132183229319212804267569609857245172190699563010303045911368944 
1748523996015819207122503672053973801759807116329056619663716454198769892066785902652554878 
-542294947655157376138526043814456732351589519118047194151659330168304308215153590486208844 
161729358620880031971279266977475707554378016762290238000893567282554531020744559074376324 
-46386918898623721747469881003020417214566850265053511450799223706659896381395790959743804 
12797051499162896398440721779023796724984325295916014796039628931842465948343894845111380 
-3396073129112728218339337536714697724329251745742194506364950008794369800942410905152136 
867027209473064571745438316617176614625159965185956598478937806132721701397948869458900 
-212962875904766156808053958032907333576950046165625774677667251904787655643757505176324 
50327885532415893880483155785349071253807731172747773207451521031252671732632230388978 
-11443438667187908543351570986876579176110747490338119245195350888150296055016975582004 
2503504763126665005017589126659165629183801291281925243578712171462099771849619254744 
-526958944944907268493639103677877316954184364418982668079438920193188411899643568508 
106715051592438328930689239004654253545573721719451360040168657740453189940915192314 
-20790779910335793865471457635357833163154112951516080880730395764735512013025652796 
3896541990320087145594716450422460409978287599082283693485952309365925318005644500 
-702441672053715648053554868151235620650214741238958432207947706491608211081312400 
121790629393362604544357589123597436252606558743434815262003043923897464121167197 
-20306355805901050837901846972656773418756565045468863673412540172210337271902340 
3255350507442216588937835814600680908204323769283956961525023238451439544941760 
-501690059905683053720524741882157670117822132733245580070161190249583644847028 
74312275258414477271317122327593160444507387370961124773453087824921327894416 
-10577404455255469741143362965021672227782124046356528509651977109935992639428 
1446398328284711960698545660047973219044522333438207563556095761539846607256 
-189965195590509120305163972290005629377791264599483176752468398233763249484 
23956016062333717865546677021452562824319209365764369018142153751707952028 
-2899855516264429489706362148867135560476890463566496024776316822467683664 
336833599313788500559679181776716047210388540402180437654119288339393740 
-37529836525283747105371855723169247756700129909528157240024250001998788 
4009530152235809687640827672341358465891595297597478301291898189654876 
-410569812715360439015853397370594547170545487427635936411500015030652 
40277795973917435115762646297317343617205272567786230485171910510652 
-3783768552039089682586618639655876942103322356223597420264279396724 
340207987956327503878827250457263328265317830300159719894983206382 
-29261155514270620208017844865051944340304021710386304703117145200 
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Degree i 


Coefficient of 


82 


2406110405248787166244163214026562342878677865734412916133200336 


83 


-189038373443757680942334919469355568250711998730640952299841492 


84 


14181101939087673375192221173276978973988251595771099469911248 


85 


-1015059691711179211122508131842675818892409168967000131556504 


86 


69273982784497519473037155287005412956159996851830481504940 


87 


-4504005163576022050795556544568918073128228705604683414856 


88 


278744922765563512122592853176105123936966933933756780006 


89 


-16405810574710923918958669050194823065267996065080494420 


90 


917373448095043315139701983319126630369060417226308240 


91 


-48685180731396433963474339952113579549797184903456932 


92 


2449403736861952764502194313954481630464621913377362 


93 


-116683889096980060401747351223521809696783299718096 


94 


5256318681823135646376194757383743386905542401984 


95 


-223594517259941108513934941256272336603486583080 


96 


8967837569963007481063656618084357384523513289 


97 


-338566611781299224336234061335519673555729968 


98 


12010206026853145744238047620715510383030860 


99 


-399536336273091783248772485529679824619372 


100 


12437443190985072692004053616601920326304 


101 


-361454027338752388080364343617032962704 


102 


9781270532352502601151919455054150468 


103 


-245758896101673421544480044149574716 


104 


5714846913247894902773082359642858 


105 


-122552946275635592994659815458660 


106 


2413849634493902632445738578404 


107 


-43467840407415668458306853984 


108 


711884504814065975117065754 


109 


- 10538669572997700747046736 


110 


140021126816597308605612 


111 


-1655565532193307303324 


112 


17242140511966984109 


113 


-156184748605164508 


114 


1211012431626440 


115 


-7871527038772 


116 


41688975082 


117 


-172657460 


118 


524076 


1 1 Q 


—1036 


120 


1 
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